This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/dh6O1KZT1UxJ74lXsViPoGTKRqs.roa File: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (raw, json) Hash identifier: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s= Subject key identifier: 76:1E:8E:D4:A6:53:D5:4C:49:EF:89:57:B1:58:8F:A0:64:CA:46:AB Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713 Certificate serial: 019B7D5B64D169047BBC86CE6F9488D07B1F Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/dh6O1KZT1UxJ74lXsViPoGTKRqs.roa Signing time: Fri 02 Jan 2026 06:18:20 +0000 ROA not before: Fri 02 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48812 IP address blocks: 95.129.24.0/24 maxlen: 24 95.129.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:64:d1:69:04:7b:bc:86:ce:6f:94:88:d0:7b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713 Validity Not Before: Jan 2 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=761e8ed4a653d54c49ef8957b1588fa064ca46ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:4f:2c:cd:38:fd:71:b1:84:d7:1c:f8:f9: c5:2d:41:70:31:90:59:0b:f0:20:2e:78:7d:01:d7: 47:2e:89:5e:a2:1d:b2:c4:35:20:88:8d:4d:85:bc: ac:f1:ee:74:87:25:5d:b7:cc:4c:d6:f0:b0:c0:68: 1e:3c:21:bf:c0:4d:63:46:5f:54:dd:87:53:50:ac: 16:c7:4f:f2:fc:f6:d3:04:74:a0:e5:46:0d:68:63: d5:c6:12:0f:06:6c:08:2d:dd:bc:9b:9e:a3:22:fc: cb:2c:80:0e:9a:fd:a4:ee:dc:16:5f:29:a3:50:60: aa:41:fd:e3:c0:3a:04:68:c3:2e:47:3a:fc:35:1b: c7:51:67:0b:01:e9:fa:8e:a5:d8:14:05:93:d3:22: a9:c1:b4:8c:45:72:60:49:1c:f8:99:bc:d0:88:f9: 97:f5:65:28:8c:70:89:da:73:a9:d4:97:60:fc:87: 44:04:f1:e8:31:62:d9:43:a6:f2:13:25:2a:8c:5e: bf:6b:73:79:05:75:1f:ff:32:02:eb:79:c6:df:51: fc:18:c9:48:86:72:85:98:fd:ab:a8:03:a6:8b:92: 05:3a:15:83:05:8e:61:fd:29:1d:9c:26:44:23:21: 3f:e5:12:14:dd:d2:b0:33:fb:c3:32:89:8b:4d:17: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1E:8E:D4:A6:53:D5:4C:49:EF:89:57:B1:58:8F:A0:64:CA:46:AB X509v3 Authority Key Identifier: keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/dh6O1KZT1UxJ74lXsViPoGTKRqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.129.24.0/23 Signature Algorithm: sha256WithRSAEncryption 21:4e:50:87:bb:72:8d:ad:a0:55:bc:8e:79:b3:6f:77:68:fa: 4d:95:e5:ff:98:b1:79:da:25:bf:75:c6:ea:d2:a6:57:50:43: 52:fd:3b:01:d0:eb:2f:d4:f7:1e:db:c1:fb:e0:bd:16:fc:e2: 88:19:a0:82:76:9c:bc:ff:9c:55:bf:59:d5:04:82:5a:8c:30: 56:ff:8c:aa:c2:18:e9:e4:a3:52:47:db:cd:61:f7:cc:d9:94: 00:fc:ee:57:1b:ea:8a:5c:31:36:91:85:89:3a:43:57:9a:70: 7b:68:17:be:6c:92:93:12:15:7a:a7:c0:a6:57:a8:1a:77:ae: 9e:d0:3d:9d:03:76:4f:f6:0d:9a:98:d9:5e:8c:07:fa:16:24: df:6d:e1:78:16:80:2a:49:8f:0e:33:a3:79:4d:1d:a3:8d:2b: 91:9f:d7:dd:70:02:de:14:11:42:08:70:5b:74:58:ee:5a:da: 27:23:55:64:cc:17:6f:1c:74:ce:18:50:65:59:0d:dc:4e:18: bc:98:db:d7:d2:fa:f7:cf:d8:9b:a6:18:16:b7:e7:20:b8:ec: 46:d7:1b:55:ba:5e:c9:35:5f:a8:17:8c:51:9b:22:c3:64:7e: eb:4a:b0:15:c4:35:41:34:72:eb:b2:4b:85:16:4e:0f:8b:58: 15:72:28:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W2TRaQR7vIbOb5SI0HsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDhhZGE4YTc0NzRmNWFkOTkwYzk4MWZmNmIyN2NlM2Rl MTQ3MTMwHhcNMjYwMTAyMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjFlOGVkNGE2NTNkNTRjNDllZjg5NTdiMTU4OGZhMDY0Y2E0NmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC5PLM04/XGxhNcc+PnFLUFwMZBZ C/AgLnh9AddHLoleoh2yxDUgiI1Nhbys8e50hyVdt8xM1vCwwGgePCG/wE1jRl9U 3YdTUKwWx0/y/PbTBHSg5UYNaGPVxhIPBmwILd28m56jIvzLLIAOmv2k7twWXymj UGCqQf3jwDoEaMMuRzr8NRvHUWcLAen6jqXYFAWT0yKpwbSMRXJgSRz4mbzQiPmX 9WUojHCJ2nOp1Jdg/IdEBPHoMWLZQ6byEyUqjF6/a3N5BXUf/zIC63nG31H8GMlI hnKFmP2rqAOmi5IFOhWDBY5h/SkdnCZEIyE/5RIU3dKwM/vDMomLTRcYCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYejtSmU9VMSe+JV7FYj6BkykarMB8GA1UdIwQY MBaAFNdIrainR09a2ZDJgf9rJ8494UcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84ZmMyNjEtYmZmOC00NDkwLThiNjkt MDA5NzM5ZjdlNTVjLzEvZGg2TzFLWlQxVXhKNzRsWHNWaVBvR1RLUnFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84ZmMyNjEtYmZmOC00NDkwLThiNjktMDA5NzM5ZjdlNTVj LzEvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4EYMA0G CSqGSIb3DQEBCwUAA4IBAQAhTlCHu3KNraBVvI55s293aPpNleX/mLF52iW/dcbq 0qZXUENS/TsB0Osv1Pce28H74L0W/OKIGaCCdpy8/5xVv1nVBIJajDBW/4yqwhjp 5KNSR9vNYffM2ZQA/O5XG+qKXDE2kYWJOkNXmnB7aBe+bJKTEhV6p8CmV6gad66e 0D2dA3ZP9g2amNlejAf6FiTfbeF4FoAqSY8OM6N5TR2jjSuRn9fdcALeFBFCCHBb dFjuWtonI1VkzBdvHHTOGFBlWQ3cThi8mNvX0vr3z9ibphgWt+cguOxG1xtVul7J NV+oF4xRmyLDZH7rSrAVxDVBNHLrskuFFk4Pi1gVcig0 -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:56 2026 by rpki-client